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Abstract. For nonzero rational D, which may be taken to be a square- 
free integer, let Ed be the elliptic curve Dy^ = — x over Q arising 
in the "congruent number" problem.^] It is known that the L-function of 
Eo has sign —1, and thus odd analytic rank r^^{Erj), if and only if \D\ 
is congruent to 5, 6, or 7 mod 8. For such D, we expect by the conjec- 
ture of Birch and Swinnerton-Dyer that the arithmetic rank of each of 
these curves Eo is odd, and therefore positive. We prove that Eo has 
positive rank for each D such that \D\ is in one of the above congruence 
classes mod 8 and also satisfies \D\ < 10^. Our proof is computational: 
we use the modular parametrization of Ei or E2 to construct a rational 
point Po on each Eo from CM points on modular curves, and compute 
Po to enough accuracy to usually distinguish it from any of the rational 
torsion points on Eo- In the 1375 cases in which we cannot numerically 
distinguish Po from {Eo) tors, we surmise that Po is in fact a torsion 
point but that Eo has rank 3, and prove that the rank is positive by 
searching for and finding a non-torsion rational point. We also report on 
the conjectural extension to \D\ < lO'^ of the list of curves Eo with odd 
fan (-Ed) > 1, which raises several new questions. 



1 Introduction 

1.1 Review: The curves Ed and their arithmetic 

For nonzero rational D let Eo be the elliptic curve 

Ed : Dy^ =x^ -X (1) 

over Q. Since Ed and -Ec^u are isomorphic for any nonzero rational c, D, we may 
assume without loss of generality that _D is a squarefree integer. The change of 
variable x <-> —x shows that Ed is also isomorphic with E^d] this may also be 
seen from the Weierstrass equation — x^ — D^x for Ed- 



^ The problem is: for which D does Eo have nontrivial rational points, or equivalently 
positive rank? Such D are called "congruent", because they are precisely the num- 
bers that arise as the common difference ("congruum") of a three-term arithmetic 
progression of rational squares, namely the squares of [x^ — 2a; — l)/2j/, [x^ + l)/2y, 
and (2;^ + 2x — l)/2y. See the Preface and Chapter XVI of | ^i[ for the early history 
of this problem, and p<ob| l for a more modern treatment of the curves Eo- 
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The arithmetic of the curves Ed has long attracted interest, both for its 
connection with the classical "congruent number" problem (see Ch.XVI]; 
\D\ is a "congruent number" if and only if Ed has positive rank) and, more 
recently, as a paradigmatic example and test case for results and constructions 
concerning elliptic curves in general (see for instance |Kob ). The curves Ed have 
some special properties that make them more accessible than general elliptic 
curves over Q. They have complex multiplication and are quadratic twists of 
the curve Ei . This led to the computation of the sign of the functional equation 
of the L-function L{Ed/CI, s): it depends on \D\ mod 8, and equals +1 or — 1 
according as \D\ is in {1, 2, 3} or {5, 6, 7} mod 8. We shall be concerned with the 
case of sign —1. 

The conjecture of Birch and Swinnerton-Dyer (BSD) predicts that the (arith- 
metic) rank of any elliptic curve E over a number field defined as the Z-rank 
of its Mordell-Weil group E{K), should equal the order of vanishing at s = 1 of 
L{E / K, s), known as the "analytic rank" r^^lE / K). The BSD conjecture im- 
plies the "BSD parity conjecture" : the arithmetic rank is even or odd according 
as the functional equation of L{E/K, s) has sign +1 or —1. It would follow that 
if the sign is —1 then E always has positive rank. In our context, where K = 
and E = Ed, this leads to the conjecture that Ed has positive rank (and thus 
that \D\ is a "congruent number") if \D\ is anyQ integer of the form 8fc + 5, 8fc-|-6, 
or 8fc + 7. 



1.2 New results and computations 

We prove: 

Theorem 1. Let D be an integer such that \D\ is congruent to 5, 6, or 7 mod 8 
and also satisfies \D\ < 10^. Then Ed has positive rank over Q. 

In our ANTS-1 paper |^| we announced such a result for \D\ < 2-10^. Our main 
tool for proving Theorem ^ is the same: we use the modular paramctrization of i?i 
or E2 to construct a rational point Pd on each Ed from CM points on modular 
curves, and usually compute Pd to enough accuracy to distinguish it from any of 
the rational torsion points on Ed- Faster computer hardware and new software 
were both needed to extend the computation to 10^. The faster machine made it 
feasible to compute Pd for more and larger D. Cremona's program MWRANK, not 



available when [El was written, found rational points on the curves Ed on which 
we could neither distinguish Pd from a torsion point nor find a rational nontor- 
sion point by direct search. This happened for 1375 values of \D\ — less than 0.5% 
of the total, but too many to list here a rational point on Ed for each such D. 
These tables, and further computational data on the curves Ed, can be found 
on the Web starting from <www.math.harvard.edu/~elkies/compnt.html>. 



^ We have dropped the hypothesis that D be squarefree because c^_D = D mod 8 for 
any odd integer c. Our integers D are not divisible by 4, and therefore cannot be of 
the form c^D for any even c. 
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Our computations also yield conjectural information on the rank of Ed: the 
rank should equal 1 if and only if Pq is nontorsion. In half the cases, those 
for which \D\ or \D\/2 is of the form 8fc + 7, we obtain this connection from 
Kolyvagin's theorem |Ko]|, which gives the "if" direction unconditionally, and 
the Gross-Zagier formula ]GZ| , which gives the "only if" direction under the 
BSD conjecture. Neither Kolyvagin nor Gross-Zagier has been proved to extend 
to the remaining cases, when \D\ or \D\/2 is of the form 8fc + 5. But we expect 
that similar results do hold in these cases, and hence that En has rank 1 if 
and only if Po is nontorsion also when \D\ or \D\/2 is congruent to 5 mod 8. 
One piece of evidence in this direction is that whenever we found Pd to be 
numerically indistinguishable from a torsion point, the Selmer groups for the 
2-isogenies between E^ and the curve Dy^ = + Ax were large enough for 
Eo to have arithmetic rank at least 3. We extended the list of curves Eo of 
conjectural rank > 3 to < 10^ by imposing the 2-descent condition from 
the start and computing Po only for those D that pass this test. We find a 
total of 8740 values of \D\. The list not only provides new numerical data on 
the distribution of quadratic twists of rank > 1 with large but also suggests 
unexpected biases in the distribution that favor some congruence classes of |-D|'s. 



2 Proof of Theorem [1| 

Let Z? be a squarefree integer such that \D\ is congruent to 5, 6, or 7 mod 8. Set 
Kd = Qiy^ji^) if D is odd, and Kd = Q(v'-|£'|/2) if D is even. Then Kd 
is an imaginary quadratic field in which the rational prime 2 splits if -D = 8A; + 7 
or _D = 16fc + 14, ramifies if D = 8A: + 5, and is inert \i D — \Qk + 6. A point 
P G EoiQ) is equivalent to a i^u-rational point Q of Ei or E2 (according as 
D is odd or even) whose complex conjugate Q equals ~Q. If Q' is any point of 
El or E2 over Ku then Q = Q' — Q' satisfies Q = —Q, and thus amounts to 
a point of Ejj over Q. To prove Theorem |l| for Ed, it will be enough to find 
Qd G Ei{Kd) or E2{Kd) and show that the point Pd £ -Bd(Q) corresponding 
to Qd - Qd is not in (£;D(Q))tors = Ed[2]. 

We use the modular parametrizations of Ei and E2 by the modular curves 
Xo(32) and Xo(64). These curves have "CM points" parametrizing cyclic isoge- 
nies of degree 32 or 64 between elliptic curves of complex multiplication by the 
same order in Kd- If the prime 2 splits in Kd, these points are defined over 
the class field of Kd; otherwise they are defined over a ray class field. (In the 



former case, the CM points are often called "Heegner points"; in the latter, [Mo 



applies the term "mock Heegner points" , though Birch points out that Heegner's 



seminal paper |IIe|| already used both kinds of points to construct rational points 
on Ed, and the distinction between the two cases was a later development.) In 
either case, we obtain a point Qd defined over Kd by taking a suitable subset of 
these CM points, mapping them to Ei or E2 by the modular parametrization. 



and adding their images using the group law of the curve. See |Bil,Bi2,Mc] for 
more details on these subsets. 
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Now the key computational point is that the size of each subset is propor- 
tional to the class number of Kd, and thus to when averaged over D. 
This is much smaller than the number of terms of the series needed to numeri- 
cally estimate L'{Ed/QI, 1), which is on the order of D: as explained for instance 
in [BGZ|, for a general elliptic curve i?/Q of conductor N{E) it takes iV^/^+'^ 
terms to adequately estimate L'{E/Q, 1), and N{Ejj) = 32_D^ or QAD'^ (accord- 
ing as D is odd or even) so N^^"^ is of order D. As explained in |E1|, the numerical 
computation of each CM point as a point on the complex torus £'i(C) or E2{C) 
to within say 10~^^ takes essentially constant time: find a representative r in a 
fundamental domain for the upper half-plane mod /o(32) or /o(64), and sum 
enough terms of a power series for ipdq/q where ip is the modular form for 
El or i?2- Thus it takes time Z\3/2+e (^^nd negligible space) to approximate Qd 
for each \D\ < 

We implemented this computation in GP and ran it for A = 10^. For all but 
1375 of the 303979 squarefree values of \D\ < 10^ congruent to 5, 6, or 7 mod 8, 
we found that Pd is at distance at least 10~* from the nearest 2-torsion point 
of E]j, and is thus a rational point of infinite order. 

For each of the remaining Z?, the point Pjj is numerically indistinguishable 
(at distancej^at most 10"^", usually much less) from a 2-torsion point. We believe 
that Pd then actually is a torsion point, and thus that we must find a nontorsion 
rational point on E^ in some other way. We did this as follows. We first searched 
for rational numbers x = r/s with |r|, |s| < 5 • lO'' such that s'^x — rs{r^ — s^) is 
D times a square for \D\ < 10^. This is a reasonable search since we may assume 
that gcd(r, s) — 1, require that one of the factors r, s, r+s, r—s of rs(r^ —s^) have 
squarefree part / < (4 • 10^)^/* and that another have squarefree part at most 
(4 • lOV/)^/^, and loop over those factors]^ This took several hours and found 
points on all but 70 of our 1375 -Ed's. The remaining curves were handled by 
Cremona's mwrank program, which used a 2-descent on each curve (exploiting 
its full rational 2-torsion) to locate a rational point. This completed the proof 
of Theorem |l|. 



3 Curves of conjectural rank > 3 

It might seem surprising that we were able to find a rational point on each of 
the 1375 Ed's for which wc could not use Po. Many curves Ed, even with D 

^ This computation is particularly efficient in our setting, in which </p is a CM form (so 
most of its coefficients vanish) and the normalizers of /o(32), r'o(64) in SL2(R) can 
be used to obtain an equivalent r with imaginary part at least 1/8 and \/3/16 re- 
spectively. These efficiencies represent a considerable practical improvement, though 
they contribute negligible factors 0{A'^) to the asymptotic running time of the com- 
putation. 

* Here, as in the preceding paragraph, the distance is measured on the complex torus 

representing E\{C) or E2(C)- 
^ In fact we removed the factors of 4 by using the squarefree parts of (r ± s)/2 instead 

of r ± s when r = s mod 2. 
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well below our upper limit of 10^, have rank 1 but generator much too large to 



locate with repeated 2-descents (see for instance [El ). The reason we could find 



nontorsion points on the curves Ed with Pd e Ed [2] is that these are precisely 
the curves En of odd sign that should have rank at least 3, which makes the 
minimal height of a non-torsion point much smaller than it can get in the rank-1 
case. We explain these connections below, and then report on our computations 
that extend to 10'' the list of \D\ such that r^^niEo) is odd and conjecturally at 
least 3. 



3.1 Pd and the rank of Ed 

Consider first the cases D — 8k + 7 and D — 16fc + 14. In these cases the prime 2, 
which is the only prime factor of the conductors of Ei and £'2, is split in Kz). 



Therefore the results of Gross-Zagier [GZ| and Kolyvagin |Kol| apply to Pd. The 



former result gives the canonical height of Pd as a positive multiple of L'{Ed, 1)- 
Therefore ran (-Ed) > 1 if and only if Pd is torsion. The latter result shows that if 
Pd is nontorsion then in fact the arithmetic rank of Ed also equals 1. Hence any 
Ed of rank 3 or more must be among those for which we could not distinguish 
Pd from a torsion point. 

The hypotheses of the theorems of Gross-Zagier and Kolyvagin are not sat- 
isfied in the remaining cases D = 8k + 5 and D = 16k + 6. However, numerical 
evidence suggests that both theorems generalize to these cases as well. For in- 
stance, when Pd is numerically indistinguishable from a torsion point, Ed seems 
to have rank 3. For small \D\ we readily find three independent points; for all 
\D\ in the range of our search, Ed and each of the curves Dy^ = + Ax and 
Dy^ =: a;'^ — llx ± 14 isogenous with Ed has a 2-Selmer group large enough to 
accommodate three independent points. When Pd is nontorsion but has small 
enough height to be recovered from its real approximation by continued frac- 
tions, we find that it is divisible by 2 if and only if the 2-Selmer group has rank 
at least 5, indicating that Ed has either rank > 3 or nontrivial HI [2]. (The for- 
mer possibility should not occur, and can often be excluded by 2-descent on one 
of the curves isogenous to Ed-) Both of these observations are consistent with a 
generalized Gross-Zagier formula and the conjecture of Birch and Swinnerton- 
Dyer, and would be most unlikely to hold if the vanishing of Pd had no relation 
with the arithmetic of Ed- We thus expect that also in these cases Ed should 
have rank > 1 if and only if Pd is a torsion point. 



3.2 Rank and minimal nonzero height 

The conjecture of Birch and Swinnerton-Dyer also explains why curves Ed of 
rank > 3 have nontorsion points of height much smaller than is typical of curves 
Ed of rank 1. This conjecture relates the regulator of the Mordell-Weil group 
of Ed with various invariants of the curve, including its real period and the 
leading coefficient L^'^\Ed^ l)/r! (where r — raa{ED))- Now the real period is 
proportional to \D\~^/'^- The leading coefficient is \D\°'^^^ under the gener- 
alized Riemann hypothesis for L{Ed,s), or even the weaker assumption of the 



6 Noam D. Elkies 



Lindelof conjecture for this family of L-series (see for instance [|s|, p.713]). One 
expects, and in practice finds, that it is also ^ (otherwise L{Ed, s) has 

zeros \ + it for very small positive t) . Thus we expect the regulator to grow as 
|£)|i/2+o(i)^ at least if III is small, which should be true for most \D\. Hence the 
minimal nonzero height would be at most |_D|^/^''. When r = 1 this grows so 
fast that already for \D\ < 10^ there are many curves Ed with generators much 
too large to be found by 2-descents^ But for r > 3 the minimal nonzero height 
is at most \D\^/^^°^^\ so \D\ must grow much larger before a 2-descent search 
becomes infeasible. 

Remark on curves curves Ed of even sign: For such curves we readily determine 
whether r^-ni^Eo) > by using the Waldspurger-Tunnell formula |Tu] to compute 
L{Ed, !)• If L{Ed, 1) / then r^uiEn) ~ and Ed also has arithmetic rank by 
Kolyvagin (or even Coates-Wiles [CW| because Ed has CM). If L(_E£),1) — then 
ran(ED) > 2, and we can prove that Ed has positive arithmetic rank if we find a 
nontorsion point. We expect that the minimal height of such a point is This 
grows slower than the estimate for rank 1, but fast enough that 2-descent 

searches fail for |D| much smaller than our bound of 10®. Even in the odd-rank case 
that concerns us in this paper, it is the curves of rank 3 that make it hard to extend 
Theorem ^ much beyond A = 10^: searching for points on those curves take time 
roughly expZ\^''®, which eventually swamps the polynomial time A^^'^^'^ required to 
find those curves. 



3.3 Computing Ed of conjectural rank > 3 with |D| < lO'' 

We extended to Z\ = lO'' our search for Pq numerically indistinguishable from 
torsion points. These are the curves that we expect to have rank at least 3. Since 
we do not expect to extend Theorem ^ to 10^, we saved time by requiring that 
the Selmer groups for the isogenics between Eo and Dtp — + Ax be large 
enough to together accommodate an arithmetic rank of 3. For very large A this 
is a negligible saving because most D pass this test. But it saved a substantial 
factor in practice for A = 10^: the test eliminated all but 35% of choices of 
\D\ = 16fc -f 14, all but 32.1% of \D\ = 16A: -I- 6, aU but 21.6% of \D\ ^ 8k + 5, 
and aU but 16.2% of |D| = 8fc + 7. We found a total of 8740 values of D for which 
Pd appears to be a torsion point. We expect that each Pd is in fact torsion and 
that the corresponding Ejj all have rank at least 3. Some Pd might conceivably 
be a nontorsion point very close to £'£)[2], but this seems quite unlikely; at any 
rate no Pd came closer than 10~^ but far enough to distinguish from -Ed [2]. All 
the curves probably have rank exactly 3: the smallest \D\ known for a curve Ed 



of rank 5 exceeds 4 • 10^ [Ro|. At any rate none of our curves with < 2 • 10 
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can have rank 5: we applied mwrank's descents-only mode to each of these Ed 



The generators can be obtained using the CM-point construction in time |7?|'^''^', 
but not because Pd must be computed to high accuracy to recognize 

its coordinates as rational numbers from their real approximations. Note that in 
our computations we showed only that Pd is nontorsion and did not attempt to 
determine it explicitly in Ed{Q)- 
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and the isogenous curves, and in each case obtained an upper bound of 3 or 4 
on the rank. Our curves Ed and the isogenous curves include many examples of 
conjectural rank 3 and nontrivial III [2]. 

There are striking disparities in the distribution of our 8740 values of 
among the allowed congruence classes. The odd classes 8fc + 5 and 8fc + 7 account 
for 2338 and 2392 curves Ed of presumed rank 3. But even |-D|'s are much more 
plentiful: there are 4010 of them, almost as many as in the two odd classes 
combined. This might be explained by the behavior of the 2-descent, which 
depends on the factorization of \D\, or the fact that we are twisting a different 
curve: Ei for odd D and E2 for even D. But the 4010 even _D's are themselves 
unequally distributed between the 16fc + 6 and 16fc + 14 cases, the former being 
significantly more numerous: 2225 as against 1785. (See Figure 1.) This disparity 
is much larger than would be predicted by the 2-descent test, which in the range 
\D\ < 10^ favors 16fc + 16 but only by a factor of 1.09 whereas 2225 exceeds 
1785 by almost 25%. Note too that the 2-descent survival rates would predict a 
preponderance of \D\ — 8k + 7 over 8fc -I- 5, whereas the two counts are almost 
identical. Do these disparities persist as A increases, and if so why? Naturally 
we would also like to understand the overall distribution of quadratic twists of 
rank > 3, not only for the "congruent number" family but for an arbitrary initial 
curve in place of Ed- We hope that the computational data reported here, and 
more fully at <www.math.harvard.edu/~elkies/compnt.html>, might suggest 
reasonable ideas and conjectures in this direction. 

Acknowledgments 

Thanks to Peter Sarnak for the reference and to the referee for several 
suggestions that improved the paper. I am grateful to the Packard Foundation 
for partial financial support during the preparation of this work. 

References 

Bil. Birch, B.J.: Elliptic curves and modular functions. Symp. Math. 4 (1970), 27-37. 
Bi2. Birch, B.J.: Heegner points of elliptic curves. Symp. Math. 15 (1975), 441-445. 
BGZ. Buhler, J. P., Gross, B.H., Zagier, D.: On the conjecture of Birch and Swinnerton- 

Dyer for an elliptic curve of rank 3. Math, of Computation 44 (1985) #175, 

473-481. 

CW. Coates, J., Wiles, A.: On the conjecture of Birch and Swinnerton-Dyer. Invent. 

Math. 39 (1977) #3, 223-251. 
Di. Dickson, L.E.: History of the Theory of Numbers, Vol. II: Diophantine Analysis. 

New York: Stechert 1934. 
El. Elkies, N.D.: Heegner point computations, Leeture Notes in Computer Scienee 

877 (proceedings of ANTS-1, 5/94), 122-133. 
GZ. Gross, B.H., Zagier, D.: Heegner points and derivatives of L-series. Invent. Math. 

84 (1986), 225-320. 

He. Heegner, K.: Diophantische Analysis und Modulfunktionen. Math. Z. 56 (1952), 
227-253. 



8 Noam D. Elkies 



IS. Iwaniec, H., Sarnak, P.: Perspectives on the analytic theory of L-functions. 
Geom. Funct. Anal. 2000, Special Volume (GAFA 2000, Tel Aviv 1999), Part II, 
705-741. 

Kob. Koblitz, N.: Introduction to elliptic curves and modular forms. New York: 
Springer 1984. 

Kol. Kolyvagin, V.A.: Euler systems. Pages 435-483 of The Grothendieck Festscrhift 

Vol. II, Birkhauser: Boston 1990. 
Mo. Monsky, P.: Mock Heegner points and congruent numbers. Math. Z. 204 (1990) 

#1, 45-67. 

Ro. Rogers, N.F.: Rank Computations for the Congruent Number Elliptic Curves. 

Experimental Mathematics 9 (2000) #4, 591-594. 
Si. Silverman, J.H.: The Arithmetic of Elliptic Curves. New York: Springer 1986. 
Tu. TunncU, ,J.B.: A classical Diophantino problem and modular forms of weight 

3/2, Invent. Math. 72 (1983) #2, 323-334. 



f(N) := number of D<N of the form 16k+6 (upper curve) or 16k+14 (lower curve) 
such that the elliptic curve D = - x has presiuned rank at least 3 




Figure 1. Twists with |_D| = 6 mod 16 seem to have rank 3 
much more often than those with \D\ = 14 mod 16 



